Please help. 60 second shutdown

G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

Hello. I have a Win 2000 machine that after or upon
bootup, receive an error about NT admin and a 60 second
timer counts down and reboots over and over. I looked
through this website on this other pc, and saw some
comments about the RUN command "shutdown -a", but when
entered, it says this is not a recognized command or
batch file (etc) and thus the timer is not terminated. Is
that command only a WinXp command? BTW, this is for my
brother's machine. He has never done any critical updates
nor service packs. It is a WIn 2000 SP1. Any help? TIA
-Dean
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

<leandean@nospam.tampabay.rr.com> wrote in message
news:2a7ed01c46761$ae358c10$a501280a@phx.gbl...
> Hello. I have a Win 2000 machine that after or upon
> bootup, receive an error about NT admin and a 60 second
> timer counts down and reboots over and over. I looked
> through this website on this other pc, and saw some
> comments about the RUN command "shutdown -a", but when
> entered, it says this is not a recognized command or
> batch file (etc) and thus the timer is not terminated. Is
> that command only a WinXp command? BTW, this is for my
> brother's machine. He has never done any critical updates
> nor service packs. It is a WIn 2000 SP1. Any help? TIA
> -Dean

Highly likely a Blaster Infection.

You will need to remove the virus. Install a software/hardware firewall then
patch the machine. Without the firewall you will just get re-infected.
 

Dean

Distinguished
Apr 15, 2004
144
0
18,680
Archived from groups: microsoft.public.win2000.security (More info?)

>-----Original Message-----
>
><leandean@nospam.tampabay.rr.com> wrote in message
>news:2a7ed01c46761$ae358c10$a501280a@phx.gbl...
>> Hello. I have a Win 2000 machine that after or upon
>> bootup, receive an error about NT admin and a 60 second
>> timer counts down and reboots over and over. I looked
>> through this website on this other pc, and saw some
>> comments about the RUN command "shutdown -a", but when
>> entered, it says this is not a recognized command or
>> batch file (etc) and thus the timer is not terminated.
Is
>> that command only a WinXp command? BTW, this is for my
>> brother's machine. He has never done any critical
updates
>> nor service packs. It is a WIn 2000 SP1. Any help? TIA
>> -Dean
>
>Highly likely a Blaster Infection.
>
>You will need to remove the virus. Install a
software/hardware firewall then
>patch the machine. Without the firewall you will just
get re-infected.
>
>
>.

Thank you. I understand the need for protection. As soon
as he went online, he was infected (it took less than 3
minutes!). He did not know the value of anit-
virus/spyware/malware/etc and other protections including
the Win critical updates until now. He always said it
took too long--which they can on a dial-up (which he
had) , but now has ethernet dsl.

You think it's ther BLASTER though?--OK, thank you for
responding.
-Dean
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

Wow. SP1?

Anyhow, try booting into safe mode to see if it will stop the offending process long
enough to implement repairs such as installing antivirus on it and/or removing the
entry in the registry run or run once folders as shown with msconfig or autoruns
which is free from SysIntenals. You could also try downloading McAffe Stinger which
will remove many common viruses and will fit on a floppy disk. If you can identify
the process, executeable, or virus name going to http://www.sarc.com/ and searching
for info will give you more info on what it is and what to do. Of course the computer
needs to have a firewall, new service pack, and have all critical updates installed.
If you are fast, right after logon run services.msc in the run box, find the remote
procedure call service and set the recovery tab to "restart the service" for failures
and hit apply. -- Steve

http://vil.nai.com/vil/stinger/
http://www.sysinternals.com/ntw2k/freeware/autoruns.shtml
http://www.microsoft.com/athome/security/protect/default.aspx

<leandean@nospam.tampabay.rr.com> wrote in message
news:2a7ed01c46761$ae358c10$a501280a@phx.gbl...
> Hello. I have a Win 2000 machine that after or upon
> bootup, receive an error about NT admin and a 60 second
> timer counts down and reboots over and over. I looked
> through this website on this other pc, and saw some
> comments about the RUN command "shutdown -a", but when
> entered, it says this is not a recognized command or
> batch file (etc) and thus the timer is not terminated. Is
> that command only a WinXp command? BTW, this is for my
> brother's machine. He has never done any critical updates
> nor service packs. It is a WIn 2000 SP1. Any help? TIA
> -Dean
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.security (More info?)

"Dean" <anonymous@discussions.microsoft.com> wrote in message
news:2a1bf01c4676b$b6af4d40$a601280a@phx.gbl...
>
> >-----Original Message-----
> >
> ><leandean@nospam.tampabay.rr.com> wrote in message
> >news:2a7ed01c46761$ae358c10$a501280a@phx.gbl...
> >> Hello. I have a Win 2000 machine that after or upon
> >> bootup, receive an error about NT admin and a 60 second
> >> timer counts down and reboots over and over. I looked
> >> through this website on this other pc, and saw some
> >> comments about the RUN command "shutdown -a", but when
> >> entered, it says this is not a recognized command or
> >> batch file (etc) and thus the timer is not terminated.
> Is
> >> that command only a WinXp command? BTW, this is for my
> >> brother's machine. He has never done any critical
> updates
> >> nor service packs. It is a WIn 2000 SP1. Any help? TIA
> >> -Dean
> >
> >Highly likely a Blaster Infection.
> >
> >You will need to remove the virus. Install a
> software/hardware firewall then
> >patch the machine. Without the firewall you will just
> get re-infected.
> >
> >
> >.
>
> Thank you. I understand the need for protection. As soon
> as he went online, he was infected (it took less than 3
> minutes!). He did not know the value of anit-
> virus/spyware/malware/etc and other protections including
> the Win critical updates until now. He always said it
> took too long--which they can on a dial-up (which he
> had) , but now has ethernet dsl.
>
> You think it's ther BLASTER though?--OK, thank you for
> responding.
> -Dean

There are other viri that show these symptoms, however Blaster is by far the
most popular RPC exploit.

If your behind an Ethernet ADSL modem, these are usually firewalls too. What
make is your Ethernet modem, what configuration, how's it all connected up?